$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/c1b8872b-1a15-34f9-9440-873b89151612.roa File: c1b8872b-1a15-34f9-9440-873b89151612.roa (raw, json) Hash identifier: C4ECCQBGUFvQF8Atzdun46g4kuOhW1UOpQ24l82wR2k= Subject key identifier: 70:DB:F4:BF:30:0D:01:0C:97:4C:27:E2:B6:07:2B:9A:10:28:5B:5D Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584F549D4BBEF3E838639998E100 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/c1b8872b-1a15-34f9-9440-873b89151612.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 125 IP address blocks: 199.64.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:4b:be:f3:e8:38:63:99:98:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2b38138a-d430-4ceb-b800-8cfd248527f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:23:91:89:87:41:ba:60:5b:41:7b:c8:81:53: 3e:5e:6c:5b:e2:7f:73:ff:3e:24:a4:d3:be:72:4c: 94:24:c6:e6:c1:eb:41:0f:bc:51:30:c0:ae:6a:7e: 9d:25:80:86:c1:83:cd:f1:80:5a:59:1a:3f:5b:65: 00:b4:48:11:7a:51:f5:fa:b7:e0:ab:8d:66:7e:6e: 68:1f:69:94:d3:0e:48:96:7e:62:ad:ae:30:a3:c1: 9a:34:fd:ff:3e:31:9d:71:61:63:f6:9b:89:30:6d: 50:fa:a1:62:85:39:53:5c:4d:15:ab:9e:13:e7:a3: 82:88:1c:f3:ca:aa:bf:d7:d1:b1:b7:57:d7:c1:8c: 8b:b1:10:44:63:a3:a6:05:f9:34:6a:f2:6f:d0:2d: 44:6d:b9:74:7f:a7:90:28:92:85:c5:82:e9:c5:14: e9:a8:1d:9b:85:c1:af:fb:90:b5:3f:89:9b:2f:63: 64:6d:9b:95:ec:28:f9:3e:6c:cd:98:c7:4a:52:93: b2:80:fd:77:8a:a7:66:9b:02:d4:fc:ef:d6:21:19: 9b:81:58:06:49:24:25:bc:d7:e6:1a:17:a8:89:c2: 75:e4:b7:b5:28:69:7f:55:e3:f0:a6:17:07:73:4a: bb:76:63:22:57:bf:99:c9:9d:11:da:32:97:63:df: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:F4:BF:30:0D:01:0C:97:4C:27:E2:B6:07:2B:9A:10:28:5B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/c1b8872b-1a15-34f9-9440-873b89151612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ee:e5:38:78:3c:b8:4b:df:e1:ba:8b:74:5c:ce:c7:e7:e8: d5:c5:90:b7:de:9f:71:17:5e:68:74:a0:55:cb:7e:07:3b:81: 45:d5:ff:b2:b1:fa:e5:24:0f:af:e7:d3:ce:08:58:c3:4d:42: dd:af:9b:66:58:f2:c8:97:95:be:fa:32:b8:e1:14:ce:46:c5: a2:d6:27:2f:c6:cd:9f:5d:85:9c:2f:79:66:dd:af:17:92:67: 62:1a:dd:03:df:35:bd:ac:1d:d3:62:25:9d:da:fc:06:ee:43: b0:2c:55:b1:5a:23:5f:0a:85:ef:2b:84:c3:bb:01:fb:9b:27: 3b:05:4f:33:25:f7:95:72:fb:55:8a:a8:9a:c9:a0:a4:4f:44: bd:d6:44:3a:29:6a:ba:f8:11:ec:90:e7:25:ab:b8:a3:fa:3a: 7b:f6:52:ef:40:0a:7d:13:40:82:18:13:88:85:27:4e:ac:3e: cc:c3:c1:65:19:60:37:97:e0:b8:e2:3d:b0:6b:ef:fc:46:f4: 87:97:bc:8c:2e:48:26:35:16:ac:25:f9:bc:81:41:07:3d:1a: 8d:d5:b9:82:ab:48:be:75:19:ce:92:de:0d:49:7e:1c:ba:f0: 0e:7c:80:0b:7e:cc:30:ee:9f:6f:cd:ea:da:cf:aa:72:dd:19: 72:ae:07:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUu+8+g4Y5mY4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmIzODEzOGEtZDQzMC00Y2ViLWI4MDAtOGNmZDI0ODUyN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiORiYdBumBbQXvIgVM+Xmxb4n9z/z4kpNO+ ckyUJMbmwetBD7xRMMCuan6dJYCGwYPN8YBaWRo/W2UAtEgRelH1+rfgq41mfm5o H2mU0w5Iln5ira4wo8GaNP3/PjGdcWFj9puJMG1Q+qFihTlTXE0Vq54T56OCiBzz yqq/19Gxt1fXwYyLsRBEY6OmBfk0avJv0C1Ebbl0f6eQKJKFxYLpxRTpqB2bhcGv +5C1P4mbL2NkbZuV7Cj5PmzNmMdKUpOygP13iqdmmwLU/O/WIRmbgVgGSSQlvNfm GheoicJ15Le1KGl/VePwphcHc0q7dmMiV7+ZyZ0R2jKXY9+n4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDb9L8wDQEMl0wn4rYHK5oQKFtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvYzFiODg3MmItMWExNS0z NGY5LTk0NDAtODczYjg5MTUxNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfu5Th4PLhL3+G6i3Rczsfn6NXFkLfen3EXXmh0oFXLfgc7gUXV/7Kx +uUkD6/n084IWMNNQt2vm2ZY8siXlb76MrjhFM5GxaLWJy/GzZ9dhZwveWbdrxeS Z2Ia3QPfNb2sHdNiJZ3a/AbuQ7AsVbFaI18Khe8rhMO7AfubJzsFTzMl95Vy+1WK qJrJoKRPRL3WRDoparr4EeyQ5yWruKP6Onv2Uu9ACn0TQIIYE4iFJ06sPszDwWUZ YDeX4LjiPbBr7/xG9IeXvIwuSCY1Fqwl+byBQQc9Go3VuYKrSL51Gc6S3g1Jfhy6 8A58gAt+zDDun2/N6trPqnLdGXKuB/s= -----END CERTIFICATE-----Generated at Sun Oct 4 06:50:06 2026 by rpki-client